The Quality of Information Systems Security Policies in Addressing Security Challenges in Public Learning Institutions of Tanzania.

Abstract

Information and data in our organisations must be protected from illegal access and associated threats. Traditionally, a comprehensive information systems security policy sets the required foundation for protecting data by directing system users on how they must behave and offering necessary controls. With this understanding, the current study determined the quality of security policies adopted by learning institutions in guiding users on the prudent use of information systems. The following institutions were included in the analysis; The Institute of Accountancy Arusha (IAA), The Institute of Finance Management (IFM). College of Business Education (CBE), University of Dar es Salaam (UDSM), Ardhi University (ARU), Arusha Technical College (ATC), Open University of Tanzania (OUT) and Eastern and Southern African Management Institute (ESAMI). This study was qualitative and descriptive. It compared the key themes of an information security policy with the actual policies of the selected organisation. The purpose was to know whether these critical policy elements are considered in sampled policies for learning institutions based in Tanzania. The comparison theme includes password management, email use principles, disaster handling and recovery, hardware and software management, and information handling. The study found that higher learning institutions in Tanzania have poor information system security policies. A harmonised policy framework is necessary to improve the quality of policies used in learning institutions in Tanzania.